PT-2019-17542 · Huawei · Huawei Y9 2019+1

Published 2019-12-13 · Updated 2019-12-18 · CVE-2019-5260

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei smartphones HUAWEI Y9 2019 and Honor View 20 (affected versions not specified)

Description The issue is related to a denial of service vulnerability. It occurs due to insufficient input validation of a specific value when parsing messages. An attacker can exploit this by sending specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Successful exploitation may cause an infinite loop and result in the device rebooting.

Recommendations For Huawei smartphones HUAWEI Y9 2019 and Honor View 20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-5260

Affected Products

Huawei Y9 2019

Honor View 20

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5260 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5260 · Vendor Advisory